On Fri, Jan 05, 2018 at 02:50:45PM +0100, Jan Kurik wrote:
= System Wide Change: Make authselect default tool instead of
authconfig =
https://fedoraproject.org/wiki/Changes/AuthselectAsDefault
Does this change do anything to reduce the number of files in /etc
that do not contain local configuration? PAM is currently one of the
worst offenders, with /etc/pam.d full of "configuration" files.
Elsewhere in the thread /usr/share/authselect/custom is metioned as
directory for admin config. That's OK-ish, as long as you also allow
a directory in /etc for the same purpose. /usr must be allowed to be
immutable.
Zbyszek